Skip to content
OpenAdvisories

Archive

19 June 2022

Vulnerabilities first published on this day (UTC), newest first.

16 results · Feed

  • Unscored —

    An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. There is Remote Code Execution due to a ha…

  • Unscored —

    An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. When installing, Microsoft SQL Express 201…

  • Unscored —

    Recipes - SSRF on Import

    In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery (SSRF), in the “Import Recipe” functionality. When an attacker enters the localhost URL, a low privileged attacker can access/read the internal file system to access sensit…

  • Medium 5.3

    FFmpeg decode_pulses memory corruption

    A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decode_pulses. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.

  • High 7.3

    FFmpeg lag_decode_frame memory corruption

    A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lag_decode_frame. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this i…

  • Medium 5.3

    FFmpeg Truemotion1 truemotion1_decode_header memory corruption

    A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function truemotion1_decode_header of the component Truemotion1 Handler. The manipulation leads to memory corruption. The attack can be launche…

  • Medium 5.3

    FFmpeg Bitstream Buffer shorten_decode_frame memory corruption

    A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shorten_decode_frame of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is r…

  • Medium 5.3

    FFmpeg cmv_process_header memory corruption

    A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmv_process_header. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.

  • High 7.3

    FFmpeg decode_update_thread_context memory corruption

    A vulnerability has been found in FFmpeg 2.0 and classified as critical. This vulnerability affects the function decode_update_thread_context. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patc…

  • Medium 5.3

    FFmpeg Slice Segment decode_nal_unit memory corruption

    A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_nal_unit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is…

  • Medium 5.3

    FFmpeg decode_slice_header memory corruption

    A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function decode_slice_header. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patc…

  • Unscored —

    libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init() in render_pipeline/low_memory_render_pipeline.…

  • High 7.8

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

  • High 7.8

    Out-of-bounds Read in vim/vim

    Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

  • High 7.8

    Out-of-bounds Write in vim/vim

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

  • High 7.8

    Buffer Over-read in vim/vim

    Buffer Over-read in GitHub repository vim/vim prior to 8.2.